CVE-2022-22047

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

No affected versions have been published.

Timeline

Published
Jul 12, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Jul 12, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-220486.1BitLocker Security Feature Bypass VulnerabilityCVE-2022-220497.8Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege VulnerabilityCVE-2022-220507.8Windows Fax Service Elevation of Privilege VulnerabilityCVE-2022-220546.5ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parametCVE-2022-220559.8The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands intoCVE-2022-220569.8The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticCVE-2022-220577.8Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously inCVE-2022-220587.8Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnCVE-2022-220597.8Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdCVE-2022-22067.8Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-220607.5Assertion occurs while processing Reconfiguration message due to improper validationCVE-2022-220617.8Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Sna